1Z0-006 Database Administration and Security Questions and Answers

Question 1

A new user account, 'DEV01', has been successfully created using the `CREATE USER` statement. However, when the user attempts to connect to the database, they receive an 'ORA-01045: user DEV01 lacks CREATE SESSION privilege; logon denied' error. What is the most likely cause of this issue?

Accepted Answer

The user has not been granted the CREATE SESSION system privilege.

Answer

In an Oracle database, successfully creating a user with `CREATE USER` only establishes the user's identity and authentication method. To actually log in and establish a connection, the user must be explicitly granted the `CREATE SESSION` system privilege. This is a fundamental security measure to control database access.

Question 2

A database administrator needs to manage permissions for a team of 20 analysts who all require the same 15 `SELECT` privileges on various tables. What is the most efficient and scalable method for managing these permissions?

Accepted Answer

Create a role, grant the 15 `SELECT` privileges to the role, and then grant the role to each of the 20 analysts.

Answer

Roles are the preferred method for managing privileges for groups of users with similar job functions. By creating a role and granting the necessary privileges to it, an administrator can then grant that single role to multiple users. This simplifies administration, as revoking or adding privileges only needs to be done once on the role, and the changes will propagate to all users granted that role.

Question 3

Which of the following is an example of an object privilege, as opposed to a system privilege?

Accepted Answer

INSERT on the `sales.orders` table

Answer

An object privilege grants permission to perform a specific action on a specific schema object, such as a table, view, or sequence. `INSERT` on the `sales.orders` table is a direct permission on a particular object. In contrast, system privileges (like `CREATE USER`, `DROP ANY TABLE`, and `CREATE TABLE`) grant the ability to perform broader, database-wide actions.

Question 4

A database administrator implements a backup strategy that involves a full backup (Level 0) on Sunday. On Monday, a backup is run that captures only the blocks changed since Sunday. On Tuesday, another backup is run that captures only the blocks changed since Monday. What type of incremental backup was performed on Monday and Tuesday?

Accepted Answer

Differential incremental backup

Answer

A differential incremental backup (the default for Level 1) captures only the data blocks that have changed since the most recent incremental backup at either the same level (Level 1) or the base level (Level 0). In this scenario, Tuesday's backup only includes changes since Monday's backup, which is characteristic of a differential strategy.

Question 5

A new accounting clerk needs to run a pre-written application that only reads data from the `invoices` and `payments` tables. According to the principle of least privilege, which of the following is the MOST appropriate set of privileges to grant?

Accepted Answer

`SELECT` privilege on the `invoices` and `payments` tables.

Answer

The principle of least privilege dictates that a user should be granted only the minimum permissions necessary to perform their required tasks. Since the clerk only needs to read data from two specific tables, granting the `SELECT` privilege on only those two tables is the correct approach, minimizing potential security risks.

(1Z0-006) Oracle Database Foundations Associate Practice Test

(1Z0-006) Oracle Database Foundations Associate Practice Test

1Z0-006 Database Administration and Security Questions and Answers